SuperTokens Core (>= 11.3.0, < 11.3.7; >= 11.4.0, < 11.4.7; >= 12.0.0, < 12.0.10)

SuperTokens Core is vulnerable to XML Signature Wrapping (XSW) due to improper validation of SAML signatures, allowing authenticated users to impersonate other accounts.